CVE-2017-18199

Опубликовано: 24 фев. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

Ссылки

http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz
Vendor Advisory
http://www.securityfocus.com/bid/103202
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3246
https://savannah.gnu.org/bugs/?52264
Exploit
Third Party Advisory
http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz
Vendor Advisory
http://www.securityfocus.com/bid/103202
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3246
https://savannah.gnu.org/bugs/?52264
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:libcdio:*:*:*:*:*:*:*:*

Версия до 1.0.0 (исключая)

EPSS

Процентиль: 66%

0.00524

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2017-18199

CVSS3: 6.5

ubuntu

больше 7 лет назад

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

CVE-2017-18199

CVSS3: 2.8

redhat

больше 7 лет назад

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.

CVE-2017-18199

CVSS3: 6.5

debian

больше 7 лет назад

realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote at ...

SUSE-SU-2020:3023-1

suse-cvrf

около 5 лет назад

Security update for libcdio

SUSE-SU-2020:14498-1

suse-cvrf

около 5 лет назад

Security update for libcdio

EPSS

Процентиль: 66%

0.00524

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476